filenameexplorer.exe
size2616320 (0x27ec00)
md58b88ebbb05a0e56b7dcc708498c02b3e
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
149307298
1473072941
101077
13230729144
1313072943
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4d6727a7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0xaf600
SizeOfInitializedData0x1cf400
SizeOfUninitializedData0
AddressOfEntryPoint0x30f02
BaseOfCode0x1000
BaseOfData0xb0000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.1
Reserved10
SizeOfImage0x281000
SizeOfHeaders0x600
CheckSum0x2873a5
Subsystem2
DllCharacteristics0x8040
SizeOfStackReserve0x40000
SizeOfStackCommit0xe000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xaf4410xaf600R-X CODE
.data0xb10000x2fd00x2c00RW- IDATA
.rsrc0xb40000x1c2e880x1c3000R-- IDATA
.reloc0x2770000x93040x9400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xac0380x190
RESOURCE0xb40000x1c2e88
EXCEPTION00
SECURITY00
BASERELOC0x2770000x9304
DEBUG0xb03e00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x687f80x40
Bound_IAT0x2700x1a4
IAT0x10000xd94
Delay_IAT0xabbf80x140
CLR_Header00
typenamesizecp
MUI#12400
BITMAP#6801350320
BITMAP#6802523120
BITMAP#6803787720
BITMAP#68041348720
BITMAP#6805350320
BITMAP#6806523120
BITMAP#6807787720
BITMAP#68081348720
BITMAP#6809350320
BITMAP#6810523120
BITMAP#6811787720
BITMAP#68121348720
BITMAP#7013164240
BITMAP#7014256400
BITMAP#7015369040
BITMAP#7016655760
ICON#1103440
ICON#226640
ICON#316400
ICON#47440
ICON#54880
ICON#62960
ICON#7194960
ICON#856720
ICON#937520
ICON#1022160
ICON#1117360
ICON#1213840
ICON#13345990
ICON#14676240
ICON#15169360
ICON#1696400
ICON#1742640
ICON#1824400
ICON#1911280
ICON#207440
ICON#214880
ICON#222960
ICON#2322160
ICON#2417360
ICON#2513840
ICON#2642640
ICON#2724400
ICON#2811280
ICON#2916400
ICON#3013840
ICON#3122160
ICON#3237520
ICON#332960
ICON#347440
ICON#3516400
ICON#367440
ICON#372960
ICON#3837520
ICON#3922160
ICON#4013840
ICON#4196400
ICON#4242640
ICON#4311280
ICON#447440
ICON#4516400
ICON#462960
ICON#4722160
ICON#4837520
ICON#4913840
ICON#507440
ICON#513040
ICON#522960
ICON#5396400
ICON#5437520
ICON#5542640
ICON#5622160
ICON#5711280
ICON#5813840
ICON#597440
ICON#603040
ICON#612960
ICON#627440
ICON#633040
ICON#642960
ICON#6596400
ICON#6637520
ICON#6742640
ICON#6822160
ICON#6911280
ICON#7013840
ICON#712960
ICON#722960
ICON#737440
ICON#742960
ICON#7522160
ICON#7613840
ICON#7737520
ICON#7816400
ICON#7916400
ICON#807440
ICON#812960
ICON#8237520
ICON#8322160
ICON#8413840
ICON#8596400
ICON#8642640
ICON#8711280
ICON#8816400
ICON#897440
ICON#902960
ICON#9137520
ICON#9222160
ICON#9313840
ICON#9496400
ICON#9542640
ICON#9611280
ICON#9796400
ICON#9842640
ICON#9924400
ICON#10011280
ICON#1012960
ICON#1027440
ICON#1032960
ICON#1042960
ICON#10513840
ICON#1064560
ICON#10716800
ICON#1084880
ICON#10917360
ICON#1107440
ICON#11122160
ICON#11212240
ICON#11329840
ICON#11416400
ICON#11537520
ICON#11626640
ICON#11756720
ICON#11811280
ICON#11920640
ICON#12024400
ICON#12142640
ICON#12267600
ICON#12396400
ICON#124169360
ICON#125570180
ICON#12612240
ICON#1277440
ICON#1284240
ICON#1292960
ICON#13029840
ICON#13122160
ICON#13215440
ICON#13313840
ICON#13467600
ICON#13542640
ICON#13617200
ICON#13711280
ICON#13826640
ICON#13916400
ICON#1407440
ICON#1414880
ICON#1422960
ICON#14356720
ICON#14437520
ICON#14522160
ICON#14617360
ICON#14713840
ICON#148682690
ICON#149169360
ICON#15096400
ICON#15142640
ICON#15224400
ICON#15311280
ICON#15416400
ICON#1557440
ICON#1564880
ICON#1572960
ICON#15837520
ICON#15922160
ICON#16017360
ICON#16113840
ICON#162490460
ICON#16396400
ICON#16442640
ICON#16524400
ICON#16611280
ICON#1677440
ICON#1684880
ICON#1694240
ICON#1702960
ICON#17122160
ICON#17217360
ICON#17315440
ICON#17413840
ICON#17542640
ICON#17624400
ICON#17717200
ICON#17811280
ICON#1797440
ICON#1802960
ICON#18122160
ICON#18213840
ICON#18342640
ICON#18411280
ICON#18516400
ICON#1867440
ICON#1872960
ICON#18837520
ICON#18922160
ICON#19013840
ICON#19196400
ICON#19242640
ICON#19311280
GROUP_ICONICO_MYCOMPUTER2720
GROUP_ICON#1011320
GROUP_ICON#102900
GROUP_ICON#1031320
GROUP_ICON#104900
GROUP_ICON#107900
GROUP_ICON#1081320
GROUP_ICON#1091320
GROUP_ICON#110480
GROUP_ICON#1111320
GROUP_ICON#205900
GROUP_ICON#250200
GROUP_ICON#251200
GROUP_ICON#2521320
GROUP_ICON#2531320
GROUP_ICON#254620
GROUP_ICON#256200
GROUP_ICON#257340
GROUP_ICON#2581740
GROUP_ICON#2593140
GROUP_ICON#2602300
GROUP_ICON#2611880
GROUP_ICON#2621740
VERSION#19120
MANIFEST#111710
module_namehintordfunction_name
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll572RegCreateKeyW
ADVAPI32.dll598RegGetValueW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll347GetTraceEnableFlags
ADVAPI32.dll348GetTraceEnableLevel
ADVAPI32.dll349GetTraceLoggerHandle
ADVAPI32.dll650RegisterTraceGuidsW
ADVAPI32.dll770UnregisterTraceGuids
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll270EventRegister
ADVAPI32.dll271EventUnregister
ADVAPI32.dll272EventWrite
ADVAPI32.dll268EventEnabled
ADVAPI32.dll310GetLengthSid
ADVAPI32.dll346GetTokenInformation
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll575RegDeleteKeyExW
ADVAPI32.dll758TraceMessage
ADVAPI32.dll612RegOpenKeyW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll116ConvertStringSidToSidW
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll507OpenServiceW
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll131CreateWellKnownSid
ADVAPI32.dll713StartServiceW
ADVAPI32.dll177CryptAcquireContextW
ADVAPI32.dll179CryptCreateHash
ADVAPI32.dll200CryptHashData
ADVAPI32.dll196CryptGetHashParam
ADVAPI32.dll182CryptDestroyHash
ADVAPI32.dll203CryptReleaseContext
ADVAPI32.dll715StartTraceW
ADVAPI32.dll246EnableTraceEx
ADVAPI32.dll717StopTraceW
ADVAPI32.dll441LsaLookupSids
ADVAPI32.dll390IsValidSid
ADVAPI32.dll344GetSidSubAuthorityCount
ADVAPI32.dll343GetSidSubAuthority
ADVAPI32.dll445LsaOpenPolicy
ADVAPI32.dll427LsaFreeMemory
ADVAPI32.dll413LsaClose
ADVAPI32.dll508OpenThreadToken
ADVAPI32.dll108ConvertSidToStringSidW
ADVAPI32.dll114ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll81CheckTokenMembership
ADVAPI32.dll552QueryServiceStatus
KERNEL32.dll829LoadLibraryExA
KERNEL32.dll206DelayLoadFailureHook
KERNEL32.dll143CreateFileW
KERNEL32.dll494GetFileSize
KERNEL32.dll959ReadFile
KERNEL32.dll944RaiseException
KERNEL32.dll344FlushInstructionCache
KERNEL32.dll1137SetLastError
KERNEL32.dll900OpenThread
KERNEL32.dll632GetSystemTimeAsFileTime
KERNEL32.dll516GetLocaleInfoW
KERNEL32.dll662GetTimeFormatW
KERNEL32.dll456GetDateFormatW
KERNEL32.dll513GetLocalTime
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll313FindFirstFileW
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll325FindNextFileW
KERNEL32.dll302FindClose
KERNEL32.dll488GetFileAttributesW
KERNEL32.dll630GetSystemTime
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll512GetLastError
KERNEL32.dll1135SetInformationJobObject
KERNEL32.dll150CreateJobObjectW
KERNEL32.dll568GetPriorityClass
KERNEL32.dll1147SetPriorityClass
KERNEL32.dll1052SearchPathW
KERNEL32.dll621GetSystemDefaultUILanguage
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll854MapViewOfFile
KERNEL32.dll663GetTimeZoneInformation
KERNEL32.dll470GetDynamicTimeZoneInformation
KERNEL32.dll369GetBinaryTypeW
KERNEL32.dll935QueryPerformanceFrequency
KERNEL32.dll943QueueUserWorkItem
KERNEL32.dll659GetTickCount64
KERNEL32.dll869MulDiv
KERNEL32.dll525GetLongPathNameW
KERNEL32.dll653GetThreadPriority
KERNEL32.dll870MultiByteToWideChar
KERNEL32.dll700GlobalGetAtomNameW
KERNEL32.dll452GetCurrentThread
KERNEL32.dll1176SetThreadPriority
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll598GetProductInfo
KERNEL32.dll1217TerminateThread
KERNEL32.dll148CreateIoCompletionPort
KERNEL32.dll605GetQueuedCompletionStatus
KERNEL32.dll214DeleteFileW
KERNEL32.dll686GetWindowsDirectoryW
KERNEL32.dll586GetProcessId
KERNEL32.dll100CompareStringW
KERNEL32.dll929QueryFullProcessImageNameW
KERNEL32.dll96CompareFileTime
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll1038ResetEvent
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll691GlobalAlloc
KERNEL32.dll702GlobalLock
KERNEL32.dll709GlobalUnlock
KERNEL32.dll698GlobalFree
KERNEL32.dll232DuplicateHandle
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll399GetComputerNameW
KERNEL32.dll196DeactivateActCtx
KERNEL32.dll2ActivateActCtx
KERNEL32.dll1016ReleaseActCtx
KERNEL32.dll120CreateActCtxW
KERNEL32.dll333FindResourceExW
KERNEL32.dll833LoadResource
KERNEL32.dll851LockResource
KERNEL32.dll895OpenProcess
KERNEL32.dll82CloseHandle
KERNEL32.dll840LocalFree
KERNEL32.dll836LocalAlloc
KERNEL32.dll932QueryInformationJobObject
KERNEL32.dll1202Sleep
KERNEL32.dll1042ResumeThread
KERNEL32.dll22AssignProcessToJobObject
KERNEL32.dll181CreateThread
KERNEL32.dll168CreateProcessW
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll354FreeLibrary
KERNEL32.dll579GetProcAddress
KERNEL32.dll831LoadLibraryW
KERNEL32.dll669GetUserDefaultUILanguage
KERNEL32.dll133CreateEventW
KERNEL32.dll1358lstrlenW
KERNEL32.dll719HeapFree
KERNEL32.dll715HeapAlloc
KERNEL32.dll584GetProcessHeap
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll723HeapSetInformation
KERNEL32.dll675GetVersionExW
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSection
KERNEL32.dll718HeapDestroy
KERNEL32.dll576GetPrivateProfileStringW
KERNEL32.dll530GetModuleFileNameW
KERNEL32.dll391GetCommandLineW
KERNEL32.dll623GetSystemDirectoryW
KERNEL32.dll281ExitProcess
KERNEL32.dll1007RegisterApplicationRestart
KERNEL32.dll1153SetProcessShutdownParameters
KERNEL32.dll610GetStartupInfoW
KERNEL32.dll1017ReleaseMutex
KERNEL32.dll158CreateMutexW
KERNEL32.dll1111SetErrorMode
KERNEL32.dll1150SetProcessDEPPolicy
KERNEL32.dll667GetUserDefaultLangID
KERNEL32.dll1112SetEvent
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll658GetTickCount
KERNEL32.dll884OpenEventW
KERNEL32.dll1163SetTermsrvAppInstallMode
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll534GetModuleHandleW
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll931QueryPerformanceCounter
KERNEL32.dll1231UnhandledExceptionFilter
KERNEL32.dll1212TerminateProcess
KERNEL32.dll99CompareStringOrdinal
KERNEL32.dll530GetModuleHandleA
KERNEL32.dll1184SetUnhandledExceptionFilter
KERNEL32.dll747InterlockedExchange
KERNEL32.dll1253VirtualAlloc
KERNEL32.dll1256VirtualFree
KERNEL32.dll827LoadLibraryA
GDI32.dll525GetStockObject
GDI32.dll685SetWindowOrgEx
GDI32.dll691StretchBlt
GDI32.dll550GetTextMetricsW
GDI32.dll34CombineRgn
GDI32.dll599Polyline
GDI32.dll75CreatePen
GDI32.dll536GetTextColor
GDI32.dll307ExtCreateRegion
GDI32.dll522GetRegionData
GDI32.dll657SetLayout
GDI32.dll493GetLayout
GDI32.dll542GetTextExtentPoint32W
GDI32.dll573OffsetRgn
GDI32.dll564LPtoDP
GDI32.dll524GetRgnBox
GDI32.dll574OffsetViewportOrgEx
GDI32.dll373GdiFlush
GDI32.dll312ExtTextOutW
GDI32.dll648SetDIBits
GDI32.dll79CreateRectRgn
GDI32.dll449GetClipRgn
GDI32.dll560IntersectClipRect
GDI32.dll553GetViewportOrgEx
GDI32.dll681SetViewportOrgEx
GDI32.dll629SelectClipRgn
GDI32.dll425GetBkColor
GDI32.dll639SetBkMode
GDI32.dll41CreateBitmap
GDI32.dll582PatBlt
GDI32.dll47CreateCompatibleBitmap
GDI32.dll575OffsetWindowOrgEx
GDI32.dll638SetBkColor
GDI32.dll678SetTextColor
GDI32.dll545GetTextExtentPointW
GDI32.dll448GetClipBox
GDI32.dll53CreateDIBSection
GDI32.dll509GetObjectW
GDI32.dll80CreateRectRgnIndirect
GDI32.dll230DeleteObject
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll19BitBlt
GDI32.dll459GetDeviceCaps
GDI32.dll64CreateFontIndirectW
GDI32.dll227DeleteDC
GDI32.dll331GdiAlphaBlend
USER32.dll576PtInRect
USER32.dll412GetWindowRect
USER32.dll398GetWindow
USER32.dll636SendMessageW
USER32.dll223EnumChildWindows
USER32.dll406GetWindowLongW
USER32.dll52CharPrevW
USER32.dll49CharNextW
USER32.dll382GetSystemMetrics
USER32.dll110CreateWindowExW
USER32.dll172DialogBoxParamW
USER32.dll270GetClassInfoW
USER32.dll269GetClassInfoExW
USER32.dll340GetMenuItemInfoW
USER32.dll337GetMenuItemCount
USER32.dll274GetClassNameW
USER32.dll318GetKeyboardLayout
USER32.dllActivateKeyboardLayout
USER32.dll457IsChild
USER32.dll442InsertMenuW
USER32.dll344GetMenuStringW
USER32.dll674SetMenuItemInfoW
USER32.dll441InsertMenuItemW
USER32.dll474IsWinEventHookInstalled
USER32.dll467IsProcessDPIAware
USER32.dll353GetNextDlgGroupItem
USER32.dll354GetNextDlgTabItem
USER32.dll294GetDlgCtrlID
USER32.dll539MoveWindow
USER32.dll468IsRectEmpty
USER32.dll769UnionRect
USER32.dll68ChildWindowFromPointEx
USER32.dll302GetGUIThreadInfo
USER32.dll644SetClassLongW
USER32.dll272GetClassLongW
USER32.dll810WindowFromDC
USER32.dll60CharUpperW
USER32.dll774UnregisterClassW
USER32.dll253FrameRect
USER32.dll402GetWindowDC
USER32.dll633SendMessageCallbackW
USER32.dll782UpdateLayeredWindow
USER32.dll395GetUserObjectInformationW
USER32.dll386GetThreadDesktop
USER32.dll360GetProcessWindowStation
USER32.dll307GetIconInfo
USER32.dll736ShowWindowAsync
USER32.dll252FlashWindowEx
USER32.dll221EndTask
USER32.dll698SetThreadDesktop
USER32.dll342GetMenuState
USER32.dll688SetScrollInfo
USER32.dll373GetScrollInfo
USER32.dll689SetScrollPos
USER32.dll16BringWindowToTop
USER32.dll159DeregisterShellHookWindow
USER32.dll482IsZoomed
USER32.dll74CloseDesktop
USER32.dll554OpenInputDesktop
USER32.dll605RegisterShellHookWindow
USER32.dll444InternalGetWindowText
USER32.dll404GetWindowInfo
USER32.dll326GetLayeredWindowAttributes
USER32.dll664SetLayeredWindowAttributes
USER32.dll265GetCaretBlinkTime
USER32.dll768UnhookWindowsHookEx
USER32.dll28CallNextHookEx
USER32.dll719SetWindowsHookExW
USER32.dll391GetUpdateRect
USER32.dll748SystemParametersInfoW
USER32.dll250FindWindowW
USER32.dll613ReleaseDC
USER32.dll289GetDC
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll349GetMessageW
USER32.dll164DestroyMenu
USER32.dll335GetMenuDefaultItem
USER32.dll107CreatePopupMenu
USER32.dll566PostMessageW
USER32.dll541MsgWaitForMultipleObjectsEx
USER32.dll563PeekMessageW
USER32.dll708SetWindowLongW
USER32.dll737ShutdownBlockReasonCreate
USER32.dll506LoadStringW
USER32.dll166DestroyWindow
USER32.dll567PostQuitMessage
USER32.dll710SetWindowPos
USER32.dll483KillTimer
USER32.dll699SetTimer
USER32.dll685SetPropW
USER32.dll735ShowWindow
USER32.dll521MapWindowPoints
USER32.dll590RegisterClassW
USER32.dll491LoadCursorW
USER32.dll639SetActiveWindow
USER32.dll783UpdateLayeredWindowIndirect
USER32.dll325GetLastInputInfo
USER32.dll627SendDlgItemMessageW
USER32.dll218EndDialog
USER32.dll291GetDesktopWindow
USER32.dll377GetShellWindow
USER32.dll163DestroyIcon
USER32.dll351GetMonitorInfoW
USER32.dll85CopyRect
USER32.dll535ModifyMenuW
USER32.dll63CheckMenuItem
USER32.dll214EnableMenuItem
USER32.dll422GhostWindowFromHungWindow
USER32.dll158DeleteMenu
USER32.dll612ReleaseCapture
USER32.dll288GetCursorPos
USER32.dll156DefWindowProcW
USER32.dll757TrackMouseEvent
USER32.dll299GetDoubleClickTime
USER32.dll446InvalidateRect
USER32.dll510LockWorkStation
USER32.dll752TileWindows
USER32.dll785UpdateWindow
USER32.dll33CascadeWindows
USER32.dll419GetWindowTextW
USER32.dll758TrackPopupMenu
USER32.dll71ClientToScreen
USER32.dll812WindowFromPoint
USER32.dll10AppendMenuW
USER32.dll220EndPaint
USER32.dll195DrawEdge
USER32.dll246FillRect
USER32.dll507LockSetForegroundWindow
USER32.dll437InflateRect
USER32.dll480IsWindowVisible
USER32.dll301GetForegroundWindow
USER32.dll356GetParent
USER32.dll807WaitMessage
USER32.dll611RegisterWindowMessageW
USER32.dll759TrackPopupMenuEx
USER32.dll276GetClientRect
USER32.dll537MonitorFromRect
USER32.dll243EqualRect
USER32.dll742SubtractRect
USER32.dll586RedrawWindow
USER32.dll230EnumDisplayMonitors
USER32.dll715SetWindowTextW
USER32.dll445IntersectRect
USER32.dll411GetWindowPlacement
USER32.dll638SendNotifyMessageW
USER32.dll617RemovePropW
USER32.dll704SetWindowCompositionAttribute
USER32.dll427HungWindowFromGhostWindow
USER32.dll658SetFocus
USER32.dll635SendMessageTimeoutW
USER32.dll242EnumWindows
USER32.dll776UnregisterHotKey
USER32.dll598RegisterHotKey
USER32.dll538MonitorFromWindow
USER32.dll475IsWindow
USER32.dll648SetCursor
USER32.dll263GetAsyncKeyState
USER32.dll659SetForegroundWindow
USER32.dll67ChildWindowFromPoint
USER32.dll650SetCursorPos
USER32.dll347GetMessagePos
USER32.dll465IsIconic
USER32.dll493LoadIconW
USER32.dll157DeferWindowPos
USER32.dll549OffsetRect
USER32.dll420GetWindowThreadProcessId
USER32.dll621ScreenToClient
USER32.dll260GetAncestor
USER32.dll536MonitorFromPoint
USER32.dll687SetRectEmpty
USER32.dll42ChangeWindowMessageFilterEx
USER32.dll485LoadAcceleratorsW
USER32.dll762TranslateAcceleratorW
USER32.dll317GetKeyState
USER32.dll711SetWindowRgn
USER32.dll414GetWindowRgnBox
USER32.dll495LoadImageW
USER32.dll300GetFocus
USER32.dll256GetActiveWindow
USER32.dll525MessageBeep
USER32.dll14BeginPaint
USER32.dll746SwitchToThisWindow
USER32.dll324GetLastActivePopup
USER32.dll217EndDeferWindowPos
USER32.dll13BeginDeferWindowPos
USER32.dll709SetWindowPlacement
USER32.dll464IsHungAppWindow
USER32.dll592RegisterClipboardFormatW
USER32.dll686SetRect
USER32.dll380GetSysColorBrush
USER32.dll363GetPropW
USER32.dll6AllowSetForegroundWindow
USER32.dll503LoadMenuW
USER32.dll378GetSubMenu
USER32.dll615RemoveMenu
USER32.dll670SetMenuDefaultItem
USER32.dll264GetCapture
USER32.dll200DrawIconEx
USER32.dll346GetMessageExtraInfo
USER32.dll660SetGestureConfig
USER32.dll2AdjustWindowRect
USER32.dll24CalculatePopupWindowPosition
USER32.dll208DrawTextW
USER32.dll640SetCapture
USER32.dll30CallWindowProcW
USER32.dll62CheckDlgButton
USER32.dll462IsDlgButtonChecked
USER32.dll476IsWindowEnabled
USER32.dll296GetDlgItemInt
USER32.dll654SetDlgItemInt
USER32.dll295GetDlgItem
USER32.dll216EnableWindow
USER32.dll703SetWinEventHook
USER32.dll540MsgWaitForMultipleObjects
USER32.dll589RegisterClassExW
USER32.dll83CopyIcon
USER32.dll3AdjustWindowRectEx
USER32.dll379GetSysColor
USER32.dll196DrawFocusRect
USER32.dll543NotifyWinEvent
USER32.dll245ExitWindowsEx
USER32.dll381GetSystemMenu
msvcrt.dll295_controlfp
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll747_onexit
msvcrt.dll578_lock
msvcrt.dll141__dllonexit
msvcrt.dll934_unlock
msvcrt.dll345_except_handler4_common
msvcrt.dll210__set_app_type
msvcrt.dll190__p__fmode
msvcrt.dll1258memcpy
msvcrt.dll1260memmove
msvcrt.dll69_CIsin
msvcrt.dll404_ftol2
msvcrt.dll62_CIcos
msvcrt.dll1129_wtoi
msvcrt.dll1371wcsncmp
msvcrt.dll1017_wcsnicmp
msvcrt.dll1007_wcsicmp
msvcrt.dll1154bsearch
msvcrt.dll185__p__commode
msvcrt.dll212__setusermatherr
msvcrt.dll257_amsg_exit
msvcrt.dll469_initterm
msvcrt.dll999_wcmdln
msvcrt.dll1167exit
msvcrt.dll106_XcptFilter
msvcrt.dll354_exit
msvcrt.dll276_cexit
msvcrt.dll225__wgetmainargs
msvcrt.dll405_ftol2_sse
msvcrt.dll1246malloc
msvcrt.dll71_CIsqrt
msvcrt.dll1158ceil
msvcrt.dll1279realloc
msvcrt.dll1361wcschr
msvcrt.dll1225iswalpha
msvcrt.dll1380wcsstr
msvcrt.dll1190free
msvcrt.dll974_vsnwprintf
msvcrt.dll1262memset
ntdll.dll1396WinSqmSetString
ntdll.dll398NtQueryInformationProcess
ntdll.dll497NtSetInformationProcess
ntdll.dll1389WinSqmIsOptedIn
ntdll.dll363NtOpenThreadToken
ntdll.dll355NtOpenProcessToken
ntdll.dll212NtClose
ntdll.dll1373WinSqmAddToStreamEx
ntdll.dll514NtSetSystemInformation
ntdll.dll1372WinSqmAddToStream
ntdll.dll1384WinSqmEventEnabled
ntdll.dll1391WinSqmSetDWORD
ntdll.dll57EtwEventWrite
ntdll.dll53EtwEventEnabled
ntdll.dll401NtQueryInformationToken
ntdll.dll888RtlGetProductInfo
SHLWAPI.dll254SHStrDupA
SHLWAPI.dll291StrCmpW
SHLWAPI.dll236
SHLWAPI.dll439
SHLWAPI.dll60PathCommonPrefixW
SHLWAPI.dll137PathRemoveExtensionW
SHLWAPI.dll487
SHLWAPI.dll93PathIsFileSpecW
SHLWAPI.dll154
SHLWAPI.dll476
SHLWAPI.dll217
SHLWAPI.dll320StrRetToStrW
SHLWAPI.dll215
SHLWAPI.dllAssocCreate
SHLWAPI.dll632
SHLWAPI.dll318StrRetToBufW
SHLWAPI.dll8AssocQueryStringW
SHLWAPI.dll467
SHLWAPI.dll127PathQuoteSpacesW
SHLWAPI.dll24
SHLWAPI.dll560
SHLWAPI.dll179SHDeleteKeyW
SHLWAPI.dll433
SHLWAPI.dll230SHRegGetUSValueW
SHLWAPI.dll631
SHLWAPI.dll213
SHLWAPI.dll97PathIsNetworkPathW
SHLWAPI.dll559
SHLWAPI.dll548
SHLWAPI.dll184
SHLWAPI.dll630
SHLWAPI.dll203SHOpenRegStream2W
SHLWAPI.dll212
SHLWAPI.dll197
SHLWAPI.dll165
SHLWAPI.dll478
SHLWAPI.dll413
SHLWAPI.dll157
SHLWAPI.dll139PathRemoveFileSpecW
SHLWAPI.dll292
SHLWAPI.dll629
SHLWAPI.dll279
SHLWAPI.dll193
SHLWAPI.dll225SHRegGetBoolUSValueW
SHLWAPI.dll204
SHLWAPI.dll460
SHLWAPI.dll85PathGetDriveNumberW
SHLWAPI.dll69PathFileExistsW
SHLWAPI.dll91PathIsDirectoryW
SHLWAPI.dll479
SHLWAPI.dll163
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll273StrChrIW
SHLWAPI.dll278
SHLWAPI.dll240
SHLWAPI.dll52PathAppendW
SHLWAPI.dll183SHDeleteValueW
SHLWAPI.dll16
SHLWAPI.dll252SHSetValueW
SHLWAPI.dll635
SHLWAPI.dll618
SHLWAPI.dll131PathRemoveArgsW
SHLWAPI.dll135PathRemoveBlanksW
SHLWAPI.dll289StrCmpNIW
SHLWAPI.dll174
SHLWAPI.dll81PathGetArgsW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll194SHGetValueW
SHLWAPI.dll174SHCreateThreadRef
SHLWAPI.dll250SHSetThreadRef
SHLWAPI.dll58PathCombineW
SHLWAPI.dll232SHRegGetValueW
SHLWAPI.dll158
SHLWAPI.dll10
SHLWAPI.dll8
SHLWAPI.dll9
SHLWAPI.dll334StrToIntW
SHLWAPI.dll270
SHLWAPI.dll276StrChrW
SHLWAPI.dll176
SHLWAPI.dll199
SHLWAPI.dll175
SHLWAPI.dll172
SHLWAPI.dll164
SHLWAPI.dll219
SHLWAPI.dll255SHStrDupW
SHLWAPI.dll151PathStripToRootW
SHLWAPI.dll256
SHLWAPI.dll168
SHLWAPI.dll12
SHLWAPI.dll336StrTrimW
SHLWAPI.dll290StrCmpNW
SHLWAPI.dll209SHQueryInfoKeyW
SHLWAPI.dll171SHCreateStreamOnFileW
SHLWAPI.dll178
SHLWAPI.dll484
SHLWAPI.dll177
SHLWAPI.dll571
SHLWAPI.dll225
SHLWAPI.dll237
SHLWAPI.dll99PathIsPrefixW
SHLWAPI.dll437
SHLWAPI.dll281StrCmpIW
SHLWAPI.dll125PathParseIconLocationW
SHLWAPI.dll103PathIsRootW
SHLWAPI.dll156
SHLWAPI.dll509
SHLWAPI.dll510
SHLWAPI.dll4AssocQueryKeyW
SHLWAPI.dll149PathStripPathW
SHLWAPI.dll10ChrCmpIW
SHLWAPI.dll325StrStrIW
SHLWAPI.dll388
SHELL32.dll134
SHELL32.dll22
SHELL32.dll162
SHELL32.dll216SHGetPropertyStoreForWindow
SHELL32.dll894
SHELL32.dll181
SHELL32.dll226SHGetStockIconInfo
SHELL32.dll265
SHELL32.dll241
SHELL32.dll6
SHELL32.dll895
SHELL32.dll88
SHELL32.dll193
SHELL32.dll787
SHELL32.dll790
SHELL32.dll840
SHELL32.dll296Shell_GetCachedImageIndexW
SHELL32.dll154
SHELL32.dll902
SHELL32.dll74
SHELL32.dll206SHGetLocalizedName
SHELL32.dll135SHCreateDataObject
SHELL32.dll165
SHELL32.dll885
SHELL32.dll814
SHELL32.dll152
SHELL32.dll849
SHELL32.dll818
SHELL32.dll158SHCreateShellItemArrayFromShellItem
SHELL32.dll205SHGetKnownFolderPath
SHELL32.dll157SHCreateShellItemArrayFromIDLists
SHELL32.dll102
SHELL32.dll28
SHELL32.dll118SHBindToFolderIDListParentEx
SHELL32.dll189SHGetFileInfoW
SHELL32.dll727
SHELL32.dll147SHCreateItemWithParent
SHELL32.dll747
SHELL32.dll85
SHELL32.dll100
SHELL32.dll18
SHELL32.dll190
SHELL32.dll190SHGetFolderLocation
SHELL32.dll155
SHELL32.dll246SHParseDisplayName
SHELL32.dll225SHGetSpecialFolderPathW
SHELL32.dll723
SHELL32.dll289ShellExecuteExW
SHELL32.dll203SHGetKnownFolderIDList
SHELL32.dll119SHBindToObject
SHELL32.dll89
SHELL32.dll200
SHELL32.dll68
SHELL32.dll245
SHELL32.dll176
SHELL32.dll680
SHELL32.dll201
SHELL32.dll660
SHELL32.dll188
SHELL32.dll899
SHELL32.dll892
SHELL32.dll208SHGetNameFromIDList
SHELL32.dll154SHCreateShellItem
SHELL32.dll67
SHELL32.dll19
SHELL32.dll17
SHELL32.dll16
SHELL32.dll753
SHELL32.dll4
SHELL32.dll2
SHELL32.dll896
SHELL32.dll61
SHELL32.dll64
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll290ShellExecuteW
SHELL32.dll166SHEnableServiceObject
SHELL32.dll132
SHELL32.dll196SHGetIDListFromObject
SHELL32.dll886
SHELL32.dll130SHChangeNotifyRegisterThread
SHELL32.dll21
SHELL32.dll25
SHELL32.dll645
SHELL32.dll644
SHELL32.dll274SHUpdateRecycleBinIcon
SHELL32.dll60
SHELL32.dll137
SHELL32.dll143SHCreateItemFromIDList
SHELL32.dll711
SHELL32.dll731
SHELL32.dll172SHFileOperationW
SHELL32.dll194SHGetFolderPathEx
SHELL32.dll733
SHELL32.dll91
SHELL32.dll254
SHELL32.dll54
SHELL32.dll244
SHELL32.dll213SHGetPathFromIDListA
SHELL32.dll195SHGetFolderPathW
SHELL32.dll120SHBindToParent
SHELL32.dll893
SHELL32.dll112SHAddToRecentDocs
SHELL32.dll302Shell_NotifyIconW
SHELL32.dll301Shell_NotifyIconGetRect
SHELL32.dll42ExtractIconExW
SHELL32.dll168SHEvaluateSystemCommandTemplate
SHELL32.dll127SHChangeNotify
SHELL32.dll144SHCreateItemFromParsingName
SHELL32.dll95
SHELL32.dll31DragQueryFileW
SHELL32.dll850
SHELL32.dll23
SHELL32.dll223SHGetSpecialFolderLocation
SHELL32.dll117SHBindToFolderIDListParent
ole32.dll306OleInitialize
ole32.dll377StringFromGUID2
ole32.dll86CoRegisterMessageFilter
ole32.dll343RegisterDragDrop
ole32.dll345RevokeDragDrop
ole32.dll329OleUninitialize
ole32.dll95CoRevokeClassObject
ole32.dll14CoCreateFreeThreadedMarshaler
ole32.dll121CreateBindCtx
ole32.dll336PropVariantClear
ole32.dll344ReleaseStgMedium
ole32.dll63CoInitializeEx
ole32.dll134CreateStreamOnHGlobal
ole32.dll83CoRegisterClassObject
ole32.dll16CoCreateInstance
ole32.dll104CoTaskMemFree
ole32.dll49CoGetInterfaceAndReleaseStream
ole32.dll73CoMarshalInterThreadInterfaceInStream
ole32.dll108CoUninitialize
ole32.dll62CoInitialize
ole32.dll50CoGetMalloc
ole32.dll103CoTaskMemAlloc
ole32.dll8CLSIDFromString
ole32.dll29CoFreeUnusedLibraries
OLEAUT32.dll150
OLEAUT32.dll4
OLEAUT32.dll2
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll6
EXPLORERFRAME.dll110
EXPLORERFRAME.dll111
UxTheme.dll1BeginBufferedPaint
UxTheme.dll62IsCompositionActive
UxTheme.dll61IsAppThemed
UxTheme.dll42GetThemeMetric
UxTheme.dll9CloseThemeData
UxTheme.dll67OpenThemeData
UxTheme.dll70SetWindowTheme
UxTheme.dll10DrawThemeBackground
UxTheme.dll56GetThemeTextExtent
UxTheme.dll16DrawThemeText
UxTheme.dll14DrawThemeParentBackground
UxTheme.dll59GetWindowTheme
UxTheme.dll43GetThemePartSize
UxTheme.dll29GetThemeBackgroundContentRect
UxTheme.dll21EndBufferedPaint
UxTheme.dll41GetThemeMargins
UxTheme.dll17DrawThemeTextEx
UxTheme.dll4BufferedPaintInit
UxTheme.dll8BufferedPaintUnInit
UxTheme.dll63IsThemeActive
UxTheme.dll86
UxTheme.dll46GetThemeRect
UxTheme.dll66IsThemePartDefined
UxTheme.dll31GetThemeBackgroundRegion
UxTheme.dll34GetThemeColor
UxTheme.dll33GetThemeBool
UxTheme.dll13DrawThemeIcon
UxTheme.dll23GetBufferedPaintBits
UxTheme.dll3BufferedPaintClear
UxTheme.dll30GetThemeBackgroundExtent
POWRPROF.dllCallNtPowerInformation
POWRPROF.dll12GetPwrCapabilities
POWRPROF.dll32PowerDeterminePlatformRole
dwmapi.dll113
dwmapi.dll105
dwmapi.dll3DwmEnableBlurBehindWindow
dwmapi.dll15DwmIsCompositionEnabled
dwmapi.dll23DwmSetWindowAttribute
dwmapi.dll127
dwmapi.dll17DwmQueryThumbnailSourceSize
dwmapi.dll24DwmUnregisterThumbnail
dwmapi.dll25DwmUpdateThumbnailProperties
dwmapi.dll114
dwmapi.dll124
slc.dll23SLGetWindowsInformationDWORD
gdiplus.dll33GdipAlloc
gdiplus.dll629GdiplusStartup
gdiplus.dll628GdiplusShutdown
gdiplus.dll237GdipFree
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll152GdipDisposeImage
gdiplus.dll300GdipGetImageWidth
gdiplus.dll290GdipGetImageHeight
gdiplus.dll77GdipCreateBitmapFromHBITMAP
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll514GdipSetCompositingMode
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll184GdipDrawImageRectI
gdiplus.dll54GdipCloneImage
Secur32.dll30GetUserNameExW
RPCRT4.dll349RpcBindingFree
RPCRT4.dll366RpcBindingSetAuthInfoExW
RPCRT4.dll498RpcStringFreeW
RPCRT4.dll351RpcBindingFromStringBindingW
RPCRT4.dll494RpcStringBindingComposeW
RPCRT4.dll45I_RpcExceptionFilter
RPCRT4.dll149NdrClientCall2
PROPSYS.dll156PropVariantToUInt32
PROPSYS.dll148PropVariantToStringAlloc
PROPSYS.dll160PropVariantToUInt64
PROPSYS.dll121PropVariantToBoolean
PROPSYS.dll205VariantToStringAlloc
PROPSYS.dll208VariantToStringWithDefault
PROPSYS.dll147PropVariantToString
PROPSYS.dll181VariantToBooleanWithDefault
PROPSYS.dll197VariantToInt32WithDefault
PROPSYS.dll45PSCreateMemoryPropertyStore
PROPSYS.dll142PropVariantToInt64

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Explorer
FileVersion6.1.7601.17567 (win7sp1_gdr.110224-1502)
InternalNameexplorer
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameEXPLORER.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.7601.17567

VS_FIXEDFILEINFO

FileVersion6.1.7601.17567
ProductVersion6.1.7601.17567
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
02616320EXE02/25/2011 03:53:11#
15c115HTM#
c1e7834599PNG(256 x 256)#
122ba057018PNG(256 x 256)#
13bd3068269PNG(256 x 256)#
157f1049046PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x270